Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/dq0MrQrZsWld1CkSSF05krW_iUs.roa
File: dq0MrQrZsWld1CkSSF05krW_iUs.roa (raw, json)
Hash identifier: gMJMKKcuOr9XjwEWMDg+IPS8VuDvpq92YuahvwnHXGw=
Subject key identifier: 76:AD:0C:AD:0A:D9:B1:69:5D:D4:29:12:48:5D:39:92:B5:BF:89:4B
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01970949B5B1AA29DC6D619F63522947F820
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/dq0MrQrZsWld1CkSSF05krW_iUs.roa
Signing time: Sun 25 May 2025 21:11:54 +0000
ROA not before: Sun 25 May 2025 21:11:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:09:49:b5:b1:aa:29:dc:6d:61:9f:63:52:29:47:f8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 25 21:11:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76ad0cad0ad9b1695dd42912485d3992b5bf894b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9c:dd:09:c5:e4:b5:25:4b:61:3e:d0:82:d6:
07:d5:6c:05:fe:1f:70:0e:04:90:88:52:08:0c:25:
2b:00:50:8e:aa:f1:33:0a:26:d7:75:1c:a9:e6:60:
44:9d:52:8c:43:83:57:36:99:98:e7:28:7d:11:da:
d1:0f:7b:1e:f4:f3:41:99:0b:a5:73:a0:27:65:4f:
1d:62:50:75:12:e3:04:91:c4:d0:2d:c2:b9:57:5e:
e9:a0:d1:8e:64:7a:bc:8d:cc:15:97:f9:c3:0e:59:
7f:f0:47:20:91:06:b2:d6:34:ad:4d:13:58:cd:3f:
3c:3a:45:a3:4f:1e:cc:da:e2:8d:06:7a:ed:9a:41:
13:b3:95:41:a0:38:8a:47:d7:81:75:72:3d:f3:53:
ad:42:72:da:eb:1b:b1:a3:de:c0:27:aa:4c:94:ad:
ca:5d:e1:bc:2c:84:9f:10:b8:d9:c0:5c:62:1e:bd:
2d:cb:2b:18:54:d6:49:ea:bf:d9:5f:76:67:9d:d2:
69:4f:7b:7a:ad:2f:be:43:58:1c:40:83:72:dc:4f:
69:9e:36:1b:60:eb:d9:02:66:a8:a2:49:d3:65:d0:
2e:52:74:06:02:b8:15:fc:72:c1:d0:68:86:48:b0:
4c:47:c0:74:62:51:b2:df:d0:02:b5:29:2a:9b:4b:
df:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AD:0C:AD:0A:D9:B1:69:5D:D4:29:12:48:5D:39:92:B5:BF:89:4B
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/dq0MrQrZsWld1CkSSF05krW_iUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
68:4e:14:e1:f4:95:15:eb:21:96:64:67:4f:1e:16:67:5a:f7:
1d:da:2b:8a:64:be:d5:e0:b7:f8:70:2f:45:9d:86:8d:0c:b4:
43:31:33:37:59:f4:0e:e6:63:c4:e9:68:d2:00:f3:ef:f0:f7:
ba:46:9d:e6:3d:56:80:76:e8:35:8a:25:a0:0a:46:c3:7d:e7:
6b:19:02:bb:b3:72:02:c2:cc:f4:48:d7:bc:e9:be:fb:16:51:
37:98:b2:51:72:95:a3:ce:5c:89:fa:54:7f:21:bb:09:0e:c5:
9b:3b:34:a2:1b:9e:88:fc:4e:57:19:65:34:38:c9:58:89:2d:
79:2f:41:0b:5d:c9:9e:2a:9d:8c:a3:53:f9:76:c3:3c:e1:5d:
d6:9f:6c:ff:a1:36:5b:1f:43:fd:e3:c7:41:0c:64:e2:a1:14:
24:ba:e1:fc:47:59:91:bc:17:db:1e:11:8a:1c:be:88:49:30:
f3:1b:22:52:6b:1f:20:57:91:4b:42:f6:5b:36:eb:fc:2c:07:
48:fa:c9:a2:b6:73:5b:60:d8:56:d5:40:0d:c8:fd:58:ec:f4:
91:fb:0c:05:12:d3:ff:72:97:b2:47:d2:1e:48:be:43:eb:e9:
5f:d2:10:14:5e:d9:5e:46:df:d9:fa:e8:53:8d:96:bb:fa:06:
94:e9:fc:21
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 13:07:14 2025 by rpki-client